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Question: 1 


Referring to the topology diagram show in the exhibit, 


A AS65002 


AS65003 


see ..... IBGP sessions 
— Physical interface connections 


— — EBGP sessions 


Which three statements are correct regarding the BGP routing updates? (Choose three.) 


A. The EBGP routing updates received by R1 from R5 will be propagated to the R2, R4, and R7 routers 
B. The EBGP routing updates received by R3 from R6 will be propagated to the R2 and R4 routers 

C. The EBGP routing updates received by R1 from R5 will be propagated to the R2 and R4 routers 

D. The IBGP routing updates received by R3 from R2 will be propagated to the R6 router 

E. The IBGP routing updates received by R2 from R1 will be propagated to the R3 router 

F. The IBGP routing updates received by R1 from R4 will be propagated to the R5, R7, and R2 routers 


Answer: A, B, D 


Question: 2 


When a BGP route reflector receives an IBGP update from a non-client IBGP peer, the route reflector 
will then forward the IBGP updates to which other router(s)? 


A. To the other clients only 


B. To the EBGP peers only 
C. To the EBGP peers and other clients only 
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D. To the EBGP peers and other clients and non-clients 


Answer: C 


Question: 3 


Which two BGP mechanisms are used to prevent routing loops when using a design with redundant 
route reflectors? (Choose two.) 


A. Cluster-list 
B. AS-Path 

C. Originator ID 
D. Community 
E. Origin 


Answer: À, C 


Question: 4 


Which two statements correctly describe the BGP ttl-security feature? (Choose two.) 


A. This feature protects the BGP processes from CPU utilization-based attacks from EBGP neighbors 
which can be multiple hops away 

B. This feature prevents IBGP sessions with non-directly connected IBGP neighbors 

C. This feature will cause the EBGP updates from the router to be sent using a TTL of 1 

D. This feature needs to be configured on each participating BGP router 

E. This feature is used together with the ebgp-multihop command 


Answer: A, D 


Question: 5 


When implementing source-based remote-triggered black hole filtering, which two configurations 
are required on the edge routers that are not the signaling router? (Choose two.) 


A. A static route to a prefix that is not used in the network with a next hop set to the NullO interface 
B. A static route pointing to the IP address of the attacker 

C. uRPF on all external facing interfaces at the edge routers 

D. Redistribution into BGP of the static route that points to the IP address of the attacker 

E. A route policy to set the redistributed static routes with the no-export BGP community 


Answer: A, C 


Question: 6 


Refer to the topology diagram shown in the exhibit and the partial configurations shown below. 
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63. 0/0/0 


PEL ae f PE2 G 
Custome! 


router statio 209.106.201.144128 
209.165.202.128/28 address-family ipv4 unicast 


192.02 1/32 nullo 


t 


tother outputs omitted 


Once the attack from 209.165.201.144/28 to 209.165.202.128/28 has been detected, which 
additional configurations are required on the P1 IOS-XR router to implement source-based remote- 
triggered black hole filtering? 

| 

router bgp 123 

address-family ipv4 unicast 


redistribute static route-policy test 
! 


A. router static 
address-family ipv4 unicast 
209.165.202.128/28 nullO tag 666 
192.0.2.1/32 nullO tag 667 
| 

route-policy test 

if tag is 666 then 

set next-hop 192.0.2.1 
endif 

if tag is 667 then 

set community (no-export) 
endif 

end-policy 

| 

B. router static 
address-family ipv4 unicast 
209.165.201.144/28 nullO tag 666 
192.0.2.1/32 nullO tag 667 
I 

route-policy test 

if tag is 666 then 

set next-hop 192.0.2.1 
endif 

if tag is 667 then 
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set community (no-export) 
endif 

end-policy 

| 

C. router static 
address-family ipv4 unicast 
209.165.201.144/28 nullO tag 666 
192.0.2.1/32 nullO 

| 

route-policy test 

if tag is 666 then 

set next-hop 192.0.2.1 

set community (no-export) 
endif 

end-policy 

D. router static 
address-family ipv4 unicast 
209.165.202.128/28 nullO tag 666 
192.0.2.1/32 nullO 

| 

route-policy test 

if tag is 666 then 

set next-hop 192.0.2.1 

set community (no-export) 
endif 

end-policy 

| 


Answer: C 


Question: 7 


In Cisco IOS-XR, the maximum-prefix command, to control the number of prefixes that can be 
installed from a BGP neighbor, is configured under which configuration mode? 


A. RP/O/RSPO/CPUO:P2(config-bgp)# 

B. RP/O/RSPO/CPUO:P2(config-bgp-af)# 

C. RP/O/RSPO/CPUO:P2(config-bgp-nbr)# 

D. RP/O/RSPO/CPUO:P2(config-bgp-nbr-af)# 


Answer: D 


Question: 8 


In Cisco IOS-XR, the ttl-security command is configured under which configuration mode? 


A. RP/O/RSPO/CPUO:P2(config)# 
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B. RP/O/RSPO/CPUO:P2(config-bgp)# 

C. RP/O/RSPO/CPUO:P2(config-bgp-nbr)# 
D. RP/O/RSPO/CPUO:P2(config-bgp-af)# 

E. RP/O/RSPO/CPUO:P2(config-bgp-nbr-af)# 


Answer: C 
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